Cisco ASA 5506 not show routes

[stephanie.ramirez1]

Does anyone knows, why Cisco ASA ASDM in monitor routes shows a route but in Configuration--> static routes doesnt show this route.

please help. Even in show running-config, doesnt shows this route.

Thanks 

[stephanie.ramirez1]

yes, let me see if i can turn off the vpn and make the change for this packet tracer, do you know if i can have redundancy betwen vpn´s?

[Maykol Rojas]

Yes you can, you will just need to add some additional configuration on both devices. On this specific device, you just need to add the crypto map on the new interface. 

Mike. 

[stephanie.ramirez1]

Ok thanks Maykol, by the way, when the VPN is down due to the priority change the interface Axtel, doesnt answer anymore. I only have to wait to turn off the vpn and do the packet tracer to send you.

[Maykol Rojas]

Sonuds good. When you do that change, can you also add a route for the VPN peer through Axtel? 

Route axtel <vpn_peer> 255.255.255.255 187.162.87.97

Mike. 

[stephanie.ramirez1]

it is normal ? that if Axtel is not the main ISP cannot answer the interface?

this route: Route axtel <vpn_peer> 255.255.255.255 187.162.87.97 is for?

[Maykol Rojas]

Yes. 

The route is to force the VPN to be established through the Axtel. 

Mike. 

[stephanie.ramirez1]

This is my routing table, so at this point i can change the distance of the routes and make outside my main ISP ?

[Maykol Rojas]

Yup, go ahead. 

Mike. 

[stephanie.ramirez1]

and the vpn will still up with this change?

[Maykol Rojas]

It should, yes. 

Mike. 

[stephanie.ramirez1]

i will test this, and i will let you know.

Thanks Maykol

[stephanie.ramirez1]

Hello maykol, now everything its working,

Thank you so much

[Maykol Rojas]

Awesome news. Glad it works. 

Saludos. 

[stephanie.ramirez1]

Hello Maykol

Do you have these commands, for vpn redundancy ?

Thanks

[Maykol Rojas]

Sure. On your ASA, you need to apply the same crypto map on the new interface:

crypto map <name> interface outside 

crypto map <name> interface outside 

And on the other side, you need to configure the new peer on the crypto map: 

crypto map <name> set peer <asa_new_ip>. 

Mike.